Security
فارسی
All products

Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client CertificatesCVE-2025-37731 · GHSA-M9GH-789G-Q5PV org.elasticsearch.plugin:x-pack-coreorg.elasticsearch.plugin:x-pack-security MavenRed Hat Medium Fix reported
Rack has an Unbounded-Parameter DoS in Rack::QueryParserCVE-2025-46727 · GHSA-GJH7-P2FX-99VX Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems High Fix reported
Rack session gets restored after deletionCVE-2025-46336 · GHSA-9J94-67JR-4CQJ Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)CVE-2025-61772 · GHSA-WPV5-97WM-HP9C Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems High Fix reported
Rack session gets restored after deletionCVE-2025-32441 · GHSA-VPFW-47H7-XJ4G Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
Ruby WEBrick read_headers method can lead to HTTP Request/Response SmugglingCVE-2025-6442 · GHSA-R995-Q44H-HR64 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
openssl: Excessive time spent checking DSA keys and parametersCVE-2024-4603 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Use After Free with SSL_free_buffersCVE-2024-4741 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: SSL_select_next_proto buffer overreadCVE-2024-5535 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculationsCVE-2024-41996 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Low-level invalid GF(2^m) parameters lead to OOB memory accessCVE-2024-9143 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
openssl: Timing side-channel in ECDSA signature computationCVE-2024-13176 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8 Red Hat Low No fix reported
ydb: ydb: Denial of Service via memory leakCVE-2026-24825 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red Hat Medium No fix reported